Red Hat Security Advisory

RHSA-2013:0122

tcl security and bug fix update

Released 2013-01-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) tcl-8.4.13-6.el5, tcl-8.4.13-6.el5.i386, tcl-8.4.13-6.el5.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) tcl-8.4.13-6.el5, tcl-8.4.13-6.el5.i386, tcl-html-8.4.13-6.el5 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) tcl-8.4.13-6.el5, tcl-devel-8.4.13-6.el5, tcl-devel-8.4.13-6.el5.i386

Fixes 2 records

TI-2007-05798 CVE-2007-6067 · GHSA-r822-pwxw-5qc9

Algorithmic complexity vulnerability in the regular expression parser in TCL before…

LOW 37

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.03855 Published 2008-01-09 Partial fix CWE-189

TI-2007-04619 CVE-2007-4772 · GHSA-x3q3-v77f-cg26

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before…

LOW 25

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (in…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03812 Published 2008-01-09 Partial fix CWE-399